Remote Code Execution (RCE)

blamer is vulnerable to remote code execution. The vulnerability exists due to the improper handling of the values of args in the blameByFile function...

Denial Of Service (DoS)

tika-parsers is vulnerable to denial of service. Improper handling of PSD files in the parse function in image/PSDParser.java allows an attacker to potentially crash the application through an infinite loop...

Cross-site Scripting (XSS)

htmr is vulnerable to cross-site scripting XSS. The vulnerability exists through the improper handling of the value of node.textContent in src/browser.ts...

CVE-2020-0841

An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0849, CVE-2020-0896...

TurboVNC Fence Message Stack-based Buffer Overflow (CVE-2019-15683)

A stack-based buffer overflow exists in TurboVNC server. The vulnerability is due to improper handling Fence message and lack of stack frame protection. A remote attacker can exploit this vulnerability by sending malicious packets to the Server. Successful exploitation of this vulnerability could...

Arbitrary File Write

decompress is vulnerable to path traversal. The vulnerability exists due to a zip slip vulnerability. Improper handling of archives containing files that has ../ in its names allows the files to be written out of the intended path...

Microsoft Windows Jet Database Remote Code Execution (CVE-2019-1249)

A remote code execution vulnerability exists in the Jet Database Engine component of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit this vulnerability by enticing a target user into opening a crafted file. Successful...

Junos OS: Improper handling of specific IPv6 packets (JSA10982)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability DDOS: Specific IPv6 packets sent by clients processed by the Routing Engine RE are improperly handled. A remote unauthenticated attacker can exploit this by sending...

Exploit for Improper Handling of Exceptional Conditions in Openbsd Opensmtpd

cve-2020-7247 Exploit Title: OpenSMTPD 6.6.2 - Remote Code Exe...

Security Bulletin: Information disclosure vulnerability affects IBM Sterling B2B Integrator (CVE-2016-5986)

Summary IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information Vulnerability Details CVEID: CVE-2016-5986 DESCRIPTION: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitiv...

Security Bulletin: Multiple Vulnerabilities in Apache Commons Affect IBM Sterling B2B Integrator (CVE-2016-3092, CVE-2014-0050, CVE-2013-0248)

Summary Multiple vulnerabilities in Apache Commons exists in IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload component. By sending file upload requests, an...

Design/Logic Flaw

The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" or similar attributes such as noreferrer, the tabnabbing may occur. To reproduce the bug,...

Foxit Reader Annotations Point Use After Free (CVE-2018-9958)

A use-after-free vulnerability exists in Foxit Reader. This vulnerability is due to improper handling of an annotation object. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system...

Design/Logic Flaw

A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device...

CVE-2020-8095

CVE-2020-8095 affects Bitdefender Total Security 2020, where the vulnerability lies in the incorrect handling of junctions. A local attacker with low privileges can exploit the flaw by creating a junction, abusing the service to delete arbitrary files, and causing a denial-of-service condition on...

CVE-2019-20215

CVE-2019-20215 affects D-Link DIR-859 firmware 1.05 and 1.06B01 Beta01. It is a remote code execution vulnerability in the ssdpcgi() M-SEARCH handling, where the urn: service/device string is checked via strstr, enabling an attacker to append arbitrary shell commands. Related entries note additio...

Oracle Outside In Excel Remote Code Execution (CVE-2018-3010)

An out-of-bounds write vulnerability exists in Oracle Outside-In. This vulnerability is due to improper handling of a PropertySetStream stream of an Excel document. Successful exploitation of this vulnerability could lead to arbitrary code execution in the context of the affected application...

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files. An attacker could exploit the vulnerability to overwrite or modify a protected file leading to a privilege escalation. To exploit the vulnerability, an attacker would first require...

OTRS 5.0.x < 5.0.40, 6.0.x < 6.0.25, 7.0.x < 7.0.14 Multiple Vulnerabilities

OTRS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:otrs:otrs"; if description...

CVE-2020-1766

Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents browser to execute malicious javascript from a special crafted SVG file rendered as inline jpg file. This issue affects: OTRS Community Edition 5.0.x version 5.0.39 and prior...